VULNERABILITY INTELLIGENCE
CVE-2014-2880
CVSS score5.8 MEDIUM
EPSS probability8.46%
CISA KEVNot currently listed
Published2014-04-17
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a changepwd action to identity/faces/firstlogin.
Weakness classification
- CWE-20: Improper Input Validation